CVE-2025-12841

The Bookit WordPress plugin (versions prior to 2.5.1 ) is vulnerable to a broken access control flaw due to a publicly accessible REST endpoint . This vulnerability allows unauthenticated remote attackers to modify the plugin's Stripe payment options , which could lead to financial fraud or servi...

WordPress plugin Bookit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-50919

Name of the Vulnerable Software and Affected Versions Bookit WordPress plugin versions prior to 2.5.1 Description The Bookit WordPress plugin contains a publicly accessible REST endpoint that allows unauthenticated modification of the plugin's Stripe payment settings. This allows attackers to alt...

CVE-2025-12841: Undefined Security Weakness

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...